autoremediator 0.21.2 → 0.22.0

package/dist/api/radar/types.d.ts

@@ -0,0 +1,162 @@
+import type { AssessUpgradeResult } from "../../remediation/impact/assess.js";
+import type { PackageSource } from "../../remediation/impact/types.js";
+import type { PackumentVersion } from "../../remediation/radar/metadata.js";
+import type { RadarModelPort } from "../../remediation/radar/model.js";
+import type { RadarCategory, RadarConfidence, RadarFlag } from "../../remediation/radar/types.js";
+export type { RadarCategory, RadarConfidence, RadarFlag, RadarModelPort };
+export type RadarTarget = "latest" | "minor" | "patch";
+export interface RadarOptions {
+    /** Project root (default: process.cwd()). Its lockfile says what is installed; its `.npmrc` picks the registry. */
+    cwd?: string;
+    /** Also look at transitive dependencies. Default: direct dependencies only. */
+    includeTransitive?: boolean;
+    /** Most entries returned, best first. Default 20. */
+    limit?: number;
+    /** Most packages analysed (direct first). Default 100. */
+    maxPackages?: number;
+    /** Which release to compare the installed one with. Default `latest`. */
+    target?: RadarTarget;
+    /** Also read GitHub release notes for packages without a changelog in the tarball (unauthenticated API, rate-limit aware). */
+    github?: boolean;
+    /** Language model `provider:model-id` that adds a bounded classification. Off when absent. */
+    model?: string;
+    /** Refuse: radar needs the registry. */
+    offline?: boolean;
+    /** Packages analysed at once. Default 4. */
+    concurrency?: number;
+    /** Per-package time limit in milliseconds. Default 120000. */
+    packageTimeoutMs?: number;
+    /** Most bytes downloaded in total (packuments and tarballs). Default 268435456. */
+    maxBytes?: number;
+    /** Check each flagged direct dependency's upgrade impact against the project (default true). */
+    assess?: boolean;
+    /** Provenance of the call; recorded by surfaces. */
+    source?: string;
+}
+export interface RadarAdvisory {
+    id: string;
+    /** First fixed version OSV lists, when it lists one. */
+    fixedIn?: string;
+}
+export interface RadarImpact {
+    rating: string;
+    summary: string;
+    findings: number;
+}
+export type RadarScope = "production" | "development" | "unreferenced" | "unknown";
+export interface RadarEntry {
+    name: string;
+    installed: string;
+    target: string;
+    upgrade: "patch" | "minor" | "major";
+    direct: boolean;
+    scope: RadarScope;
+    /** Stable releases after `installed` up to `target`. */
+    releases: string[];
+    /** `per-release` when consecutive versions were diffed, `span` when installed and target were diffed once. */
+    diff: "per-release" | "span";
+    score: number;
+    confidence: RadarConfidence;
+    breakdown: Record<RadarCategory, number>;
+    /**
+     * `silent`: OSV lists no advisory fixed in this range. `now-advisory`: one does (see `advisories`).
+     * `unchecked`: OSV could not be reached, so it is unknown.
+     */
+    status: "silent" | "now-advisory" | "unchecked";
+    advisories: RadarAdvisory[];
+    /** The wording to use: a security-relevant change without a published advisory, never a claim of a vulnerability. */
+    statement: string;
+    flags: RadarFlag[];
+    impact?: RadarImpact;
+    notes: string[];
+}
+export interface RadarSkipped {
+    name: string;
+    version?: string;
+    reason: string;
+}
+export interface RadarReport {
+    schemaVersion: "1.0";
+    /** What a flag means and does not mean. */
+    disclaimer: string;
+    target: RadarTarget;
+    includeTransitive: boolean;
+    /** Packages whose releases were compared. */
+    analysed: number;
+    /** Packages already at the target. */
+    upToDate: number;
+    /** Analysed packages with nothing above the reporting threshold. */
+    clean: number;
+    /** Packages scoring at least `weak`; `entries` holds the best `limit` of them. */
+    flagged: number;
+    entries: RadarEntry[];
+    skipped: RadarSkipped[];
+    notes: string[];
+    bytesDownloaded: number;
+    model?: {
+        used: boolean;
+        spec?: string;
+    };
+    scoring: {
+        points: unknown;
+        caps: Record<RadarCategory, number>;
+        thresholds: {
+            likely: number;
+            possible: number;
+            weak: number;
+        };
+        rule: string;
+    };
+}
+export interface InstalledPackage {
+    name: string;
+    version: string;
+    direct: boolean;
+    scope: RadarScope;
+}
+export interface RegistryVersions {
+    /** Stable (non-prerelease) versions with their deprecation message and publish time. */
+    versions: PackumentVersion[];
+    latest?: string;
+    /** Approximate size of the response, charged to the byte budget. */
+    bytes: number;
+    /** A note when publish times or deprecations could not be read. */
+    note?: string;
+}
+/** A published version read into memory, with its release-history files. */
+export interface RadarPackage extends PackageSource {
+    docs: Map<string, string>;
+}
+export interface GithubRelease {
+    tag: string;
+    body: string;
+}
+export interface GithubReleases {
+    releases: GithubRelease[];
+    /** Why it stopped early, e.g. rate limit; shown as a note. */
+    note?: string;
+}
+/** Counts bytes downloaded and refuses once the cap is spent. */
+export interface ByteBudget {
+    readonly limit: number;
+    used: number;
+    charge(bytes: number): void;
+    assertRoom(what: string): void;
+}
+/** Everything radar fetches or reads. Tests replace these; nothing else touches the network or disk. */
+export interface RadarDeps {
+    listInstalled(cwd: string): InstalledPackage[];
+    fetchVersions(name: string, cwd: string, budget: ByteBudget): Promise<RegistryVersions | undefined>;
+    loadPackage(name: string, version: string, cwd: string, budget: ByteBudget): Promise<RadarPackage>;
+    queryAdvisories(name: string, version: string): Promise<Array<RadarAdvisory & {
+        range?: string;
+    }>>;
+    fetchGithubReleases(repository: {
+        owner: string;
+        repo: string;
+    }): Promise<GithubReleases>;
+    assess(name: string, from: string, to: string, cwd: string, load: (name: string, version: string) => Promise<RadarPackage>): Promise<AssessUpgradeResult>;
+    /** Present only when a model was asked for. */
+    model?: RadarModelPort;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/api/radar/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/api/radar/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElG,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAE1E,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,mHAAmH;IACnH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8HAA8H;IAC9H,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEnF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;IAClB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,8GAA8G;IAC9G,IAAI,EAAE,aAAa,GAAG,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACzC;;;OAGG;IACH,MAAM,EAAE,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;IAChD,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,qHAAqH;IACrH,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,KAAK,CAAC;IACrB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,OAAO,EAAE;QACP,MAAM,EAAE,OAAO,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpC,UAAU,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/D,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wFAAwF;IACxF,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,4EAA4E;AAC5E,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wGAAwG;AACxG,MAAM,WAAW,SAAS;IACxB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAC/C,aAAa,CACX,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACzC,WAAW,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,CAAC,CAAC;IACzB,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,CAAC,aAAa,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACtD,mBAAmB,CAAC,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1F,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,GAC7D,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,+CAA+C;IAC/C,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB"}

package/dist/api/radar/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/api/radar/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/api/radar/types.ts"],"names":[],"mappings":""}

package/dist/api/reachability/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/reachability/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAMhG,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAGjC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/reachability/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EAEvB,MAAM,yBAAyB,CAAC;AAyCjC,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAQjC"}

package/dist/api/reachability/index.js

@@ -1,9 +1,43 @@
+import { resolve } from "node:path";
 /**
  * Public SDK API: checkReachability
  */
 import { assessPackageReachability } from "../../remediation/tools/check-reachability.js";
+import { readTraceFile } from "../../trace/fold.js";
+import { assessRuntimeReachability } from "../../trace/verdict.js";
+/**
+ * Combine the static scan with what a traced run showed. Runtime evidence can only add reachability
+ * (a call that was observed happened); it never turns a static "reachable" into "not-reachable",
+ * because a package that did not run in a traced command may still run elsewhere.
+ */
+function withRuntimeEvidence(staticResult, runtime, symbol) {
+    const merged = {
+        ...staticResult,
+        evidenceKind: staticResult.status === "unknown" ? "runtime" : "both",
+        runtime,
+    };
+    // Without a symbol the question is "is the package used at all", which a load answers.
+    const observed = runtime.verdict === "called-in-tests" ||
+        (symbol === undefined &&
+            (runtime.verdict === "loaded-in-tests" || runtime.verdict === "loaded-not-called-in-tests"));
+    if (!observed || staticResult.status === "reachable")
+        return merged;
+    const { justification: _dropped, ...rest } = merged;
+    return {
+        ...rest,
+        status: "reachable",
+        staticStatus: staticResult.status,
+        reachabilityBasis: runtime.verdict === "called-in-tests" ? "runtime-call-observed" : "runtime-load-observed",
+        reason: `${runtime.reason} The static scan reported: ${staticResult.reason}`,
+    };
+}
 export async function checkReachability(options) {
     const cwd = options.cwd ?? process.cwd();
-    return assessPackageReachability(cwd, options.packageName, options.symbol);
+    const staticResult = assessPackageReachability(cwd, options.packageName, options.symbol);
+    if (!options.traceFile)
+        return { ...staticResult, evidenceKind: "static" };
+    const trace = readTraceFile(resolve(cwd, options.traceFile));
+    const runtime = assessRuntimeReachability(trace, options.packageName, options.symbol);
+    return withRuntimeEvidence(staticResult, runtime, options.symbol);
 }
 //# sourceMappingURL=index.js.map

package/dist/api/reachability/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/reachability/index.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/reachability/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC;;GAEG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,YAAoC,EACpC,OAA4B,EAC5B,MAA0B;IAE1B,MAAM,MAAM,GAA2B;QACrC,GAAG,YAAY;QACf,YAAY,EAAE,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QACpE,OAAO;KACR,CAAC;IACF,uFAAuF;IACvF,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,KAAK,iBAAiB;QACrC,CAAC,MAAM,KAAK,SAAS;YACnB,CAAC,OAAO,CAAC,OAAO,KAAK,iBAAiB,IAAI,OAAO,CAAC,OAAO,KAAK,4BAA4B,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IAEpE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACpD,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,WAAW;QACnB,YAAY,EAAE,YAAY,CAAC,MAAM;QACjC,iBAAiB,EACf,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB;QAC3F,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,8BAA8B,YAAY,CAAC,MAAM,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,EAAE,GAAG,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAE3E,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,OAAO,mBAAmB,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC"}

package/dist/api/recipes/index.d.ts

@@ -0,0 +1,93 @@
+import { rangeAround } from "../../recipes/capture.js";
+import { type Discovery, type RecipeEntry, type RecipeSource } from "../../recipes/discover.js";
+import { type Recipe, recipeId } from "../../recipes/schema.js";
+import { type ExportResult } from "../../recipes/store.js";
+import { defaultAttemptDeps } from "../../remediation/repair/attempt.js";
+import { type AttemptQuery, type AttemptView, withVerification } from "../runs/attempts.js";
+import { type RunDeps } from "../runs/deps.js";
+export interface ListRecipesOptions {
+    /** Project directory (default: process.cwd()). */
+    cwd?: string;
+    /** Only recipes for this package. */
+    packageName?: string;
+    /** With `toVersion`: mark which recipes apply to upgrading from this version. */
+    fromVersion?: string;
+    toVersion?: string;
+    /** Include the whole recipe (every hunk) for the recipe with this id. */
+    recipeId?: string;
+    /** Policy file, for its `recipes.packages` (default: `.github/autoremediator.yml`). */
+    policy?: string;
+}
+export interface RecipeSummary {
+    id: string;
+    package: string;
+    fromRange: string;
+    toRange: string;
+    source: RecipeSource;
+    file: string;
+    summary?: string;
+    hunks: number;
+    breaking: number;
+    /** Set when `fromVersion` and `toVersion` were given. */
+    applies?: boolean;
+    evidence?: Recipe["evidence"];
+    /** Only for the recipe named by `recipeId`. */
+    recipe?: Recipe;
+}
+export interface RecipeListing {
+    recipes: RecipeSummary[];
+    /** Recipe files that were found but cannot be used, and why. */
+    problems: Discovery["problems"];
+}
+/** List the recipes available to a project: its own, its policy's recipe packages and its installed packages'. */
+export declare function listRecipes(options?: ListRecipesOptions): RecipeListing;
+export interface ApplyRecipeOptions extends AttemptQuery {
+    /** Id from `listRecipes` (or `startAttempt`'s `recipes`). */
+    recipeId: string;
+}
+/**
+ * Apply a recipe to an open attempt's checkout and judge the result. The recipe is matched against
+ * the checkout's source exactly, turned into a diff and put through the same validation as
+ * `proposePatch`; the verifier then decides. If it does not pass, the recipe is taken back out and
+ * the checkout is as it was.
+ */
+export declare function applyRecipe(options: ApplyRecipeOptions, deps?: RunDeps): Promise<AttemptView>;
+export interface CaptureRecipeOptions {
+    cwd?: string;
+    runId: string;
+    /** The attempt to capture (default: the run's latest repaired one). */
+    attemptId?: string;
+    /** Override the versions the recipe applies from (default: this major, from the observed version). */
+    fromRange?: string;
+    toRange?: string;
+}
+export interface CaptureRecipeResult {
+    id: string;
+    /** Absolute path of the recipe file. */
+    path: string;
+    /** False when the same recipe was already saved. */
+    created: boolean;
+    recipe: Recipe;
+}
+/**
+ * Save what a run's agent repair learned in the project's `.autoremediator/recipes/`, where it can
+ * be committed, reviewed and shared. The recipe was derived when the repair was accepted, from the
+ * diff and the verifier's findings; this copies it out of the run, unchanged unless the ranges are
+ * overridden.
+ */
+export declare function captureRecipe(options: CaptureRecipeOptions): CaptureRecipeResult;
+export interface ExportRecipesOptions {
+    cwd?: string;
+    /** Directory to create the package in (must not exist, or be empty). */
+    outDir: string;
+    /** npm name of the recipes package, e.g. `@acme/autoremediator-recipes`. */
+    name: string;
+    version?: string;
+    /** Only these packages' recipes (default: all of the project's). */
+    packages?: string[];
+}
+/** Write a publishable npm package of the project's recipes. Nothing is published. */
+export declare function exportRecipes(options: ExportRecipesOptions): ExportResult;
+export type { ExportResult, RecipeEntry };
+export { rangeAround, recipeId, defaultAttemptDeps, withVerification };
+//# sourceMappingURL=index.d.ts.map

package/dist/api/recipes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/recipes/index.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,KAAK,MAAM,EAAe,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAA0C,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAIzE,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,WAAW,EAKhB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,gEAAgE;IAChE,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;CACjC;AA+BD,kHAAkH;AAClH,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,aAAa,CAS3E;AAED,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,OAAwB,GAC7B,OAAO,CAAC,WAAW,CAAC,CAyDtB;AAID,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sGAAsG;IACtG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAiChF;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,YAAY,CAQzE;AAED,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/api/recipes/index.js

@@ -0,0 +1,159 @@
+/**
+ * Recipes: what an agent learned when it made an upgrade work, kept as data so the next project (or
+ * the next run) does not have to learn it again. See docs/guides/recipes.md.
+ *
+ * Reading (`listRecipes`) is read-only. `applyRecipe` writes only inside an open attempt's isolated
+ * checkout, like `proposePatch`, and keeps the change only if the verifier accepts it. `captureRecipe`
+ * and `exportRecipes` write files in the project or a directory you name, so they are SDK and CLI only.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { loadPolicy } from "../../platform/policy.js";
+import { rangeAround } from "../../recipes/capture.js";
+import { discoverRecipes, } from "../../recipes/discover.js";
+import { appliesTo } from "../../recipes/engine.js";
+import { parseRecipe, recipeId } from "../../recipes/schema.js";
+import { exportRecipePackage, saveProjectRecipe } from "../../recipes/store.js";
+import { defaultAttemptDeps } from "../../remediation/repair/attempt.js";
+import { undoPatch } from "../../remediation/repair/patch-apply.js";
+import { applyRecipeToCheckout } from "../../remediation/repair/recipe-attempt.js";
+import { context, loadOpen, verifyAttempt, viewOf, withVerification, } from "../runs/attempts.js";
+import { defaultRunDeps } from "../runs/deps.js";
+function discover(cwd, installRoot, policy) {
+    return discoverRecipes({
+        projectDir: cwd,
+        installRoot,
+        fallbackInstallRoot: cwd,
+        policyPackages: loadPolicy(cwd, policy).recipes?.packages ?? [],
+    });
+}
+function summarize(entry, options) {
+    const summary = {
+        id: entry.id,
+        package: entry.recipe.package,
+        fromRange: entry.recipe.fromRange,
+        toRange: entry.recipe.toRange,
+        source: entry.source,
+        file: entry.file,
+        hunks: entry.recipe.hunks.length,
+        breaking: entry.recipe.breaking.length,
+    };
+    if (entry.recipe.summary)
+        summary.summary = entry.recipe.summary;
+    if (options.fromVersion !== undefined && options.toVersion !== undefined) {
+        summary.applies = appliesTo(entry.recipe, options.fromVersion, options.toVersion);
+    }
+    if (entry.recipe.evidence)
+        summary.evidence = entry.recipe.evidence;
+    if (options.recipeId === entry.id)
+        summary.recipe = entry.recipe;
+    return summary;
+}
+/** List the recipes available to a project: its own, its policy's recipe packages and its installed packages'. */
+export function listRecipes(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const found = discover(cwd, cwd, options.policy);
+    return {
+        recipes: found.recipes
+            .filter((entry) => !options.packageName || entry.recipe.package === options.packageName)
+            .map((entry) => summarize(entry, options)),
+        problems: found.problems,
+    };
+}
+/**
+ * Apply a recipe to an open attempt's checkout and judge the result. The recipe is matched against
+ * the checkout's source exactly, turned into a diff and put through the same validation as
+ * `proposePatch`; the verifier then decides. If it does not pass, the recipe is taken back out and
+ * the checkout is as it was.
+ */
+export async function applyRecipe(options, deps = defaultRunDeps) {
+    const { cwd, store } = context(options);
+    const record = loadOpen(store, options.runId, options.attemptId);
+    const plan = store.readPlan(options.runId);
+    const item = plan?.items.find((candidate) => candidate.itemId === record.itemId);
+    if (!plan || !item)
+        throw new Error(`Attempt ${record.attemptId} refers to a plan item that no longer exists.`);
+    const found = discover(cwd, record.worktreePath, plan.options.policy);
+    const entry = found.recipes.find((candidate) => candidate.id === options.recipeId);
+    if (!entry)
+        throw new Error(`Recipe not found: ${options.recipeId} (see listRecipes).`);
+    if (entry.recipe.package !== item.packageName ||
+        !appliesTo(entry.recipe, item.fromVersion, item.toVersion)) {
+        throw new Error(`Recipe ${entry.id} is for ${entry.recipe.package} ${entry.recipe.fromRange} to ${entry.recipe.toRange}, not for ${item.packageName} ${item.fromVersion} to ${item.toVersion}.`);
+    }
+    const application = await applyRecipeToCheckout(record.worktreePath, entry);
+    if (!application.ok)
+        throw new Error(`Recipe ${entry.id} does not apply: ${application.reason}`);
+    const files = application.applied.files;
+    const ledger = store.ledger(options.runId);
+    const checked = await verifyAttempt({ cwd, runId: options.runId, attemptId: options.attemptId }, deps);
+    if (checked.verification?.passed) {
+        ledger.append("attempt.recipe", {
+            attemptId: record.attemptId,
+            recipeId: entry.id,
+            applied: true,
+            files,
+        });
+        return {
+            ...checked,
+            recipe: { id: entry.id, applied: true, files },
+            message: `Recipe ${entry.id} applied to ${files.join(", ")} and the verifier accepted it. Finalize it.`,
+        };
+    }
+    await undoPatch(record.worktreePath, application.applied);
+    const rejectedBy = checked.verification?.failedCheck ?? "unknown";
+    const restored = { ...record, endedAt: new Date().toISOString() };
+    store.writeAttempt(options.runId, restored);
+    ledger.append("attempt.recipe", {
+        attemptId: record.attemptId,
+        recipeId: entry.id,
+        applied: false,
+        rejectedBy,
+    });
+    return viewOf(restored, options.runId, {
+        recipe: { id: entry.id, applied: false, files, rejectedBy },
+        message: `Recipe ${entry.id} matched ${files.join(", ")} but the verifier rejected it (${rejectedBy}), so it was undone; the checkout is as it was.`,
+    });
+}
+/**
+ * Save what a run's agent repair learned in the project's `.autoremediator/recipes/`, where it can
+ * be committed, reviewed and shared. The recipe was derived when the repair was accepted, from the
+ * diff and the verifier's findings; this copies it out of the run, unchanged unless the ranges are
+ * overridden.
+ */
+export function captureRecipe(options) {
+    const { cwd, store } = context(options);
+    store.load(options.runId);
+    const candidates = store
+        .listAttempts(options.runId)
+        .filter((attempt) => attempt.status === "promoted" &&
+        (!options.attemptId || attempt.attemptId === options.attemptId))
+        .toReversed();
+    const chosen = candidates.find((attempt) => existsSync(join(store.attemptDir(options.runId, attempt.attemptId), "recipe.json")));
+    if (!chosen) {
+        throw new Error(options.attemptId
+            ? `Attempt ${options.attemptId} has no recipe to capture (it was not a promoted agent repair, or it changed no source a recipe can describe).`
+            : `Run ${options.runId} has no promoted agent repair with a recipe to capture.`);
+    }
+    const recipe = parseRecipe(readFileSync(join(store.attemptDir(options.runId, chosen.attemptId), "recipe.json"), "utf8"));
+    const withRanges = {
+        ...recipe,
+        fromRange: options.fromRange ?? recipe.fromRange,
+        toRange: options.toRange ?? recipe.toRange,
+    };
+    const checked = parseRecipe(JSON.stringify(withRanges));
+    const saved = saveProjectRecipe(cwd, checked);
+    return { id: saved.id, path: saved.path, created: saved.created, recipe: checked };
+}
+/** Write a publishable npm package of the project's recipes. Nothing is published. */
+export function exportRecipes(options) {
+    return exportRecipePackage({
+        projectDir: options.cwd ?? process.cwd(),
+        outDir: options.outDir,
+        name: options.name,
+        ...(options.version ? { version: options.version } : {}),
+        ...(options.packages ? { packages: options.packages } : {}),
+    });
+}
+export { rangeAround, recipeId, defaultAttemptDeps, withVerification };
+//# sourceMappingURL=index.js.map

package/dist/api/recipes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/recipes/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACL,eAAe,GAIhB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAe,WAAW,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAqB,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAEnF,OAAO,EAGL,OAAO,EACP,QAAQ,EACR,aAAa,EACb,MAAM,EACN,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAgB,MAAM,iBAAiB,CAAC;AAuC/D,SAAS,QAAQ,CAAC,GAAW,EAAE,WAAmB,EAAE,MAA0B;IAC5E,OAAO,eAAe,CAAC;QACrB,UAAU,EAAE,GAAG;QACf,WAAW;QACX,mBAAmB,EAAE,GAAG;QACxB,cAAc,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAkB,EAAE,OAA2B;IAChE,MAAM,OAAO,GAAkB;QAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;QACjC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;QAChC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM;KACvC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;IACjE,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;IACpE,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,WAAW,CAAC,OAAO,GAAuB,EAAE;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;aACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,WAAW,CAAC;aACvF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B,EAC3B,IAAI,GAAY,cAAc;IAE9B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IACjF,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAChB,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,SAAS,+CAA+C,CAAC,CAAC;IAE9F,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;IACxF,IACE,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW;QACzC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,EAAE,WAAW,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,aAAa,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC,SAAS,GAAG,CAChL,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,oBAAoB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;IAExC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,aAAa,CACjC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAC3D,IAAI,CACL,CAAC;IACF,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE;YAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,OAAO,EAAE,IAAI;YACb,KAAK;SACN,CAAC,CAAC;QACH,OAAO;YACL,GAAG,OAAO;YACV,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;YAC9C,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;SACxG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,IAAI,SAAS,CAAC;IAClE,MAAM,QAAQ,GAAkB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACjF,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,KAAK,CAAC,EAAE;QAClB,OAAO,EAAE,KAAK;QACd,UAAU;KACX,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE;QACrC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE;QAC3D,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,UAAU,iDAAiD;KACrJ,CAAC,CAAC;AACL,CAAC;AAuBD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,KAAK;SACrB,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;SAC3B,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,UAAU;QAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAClE;SACA,UAAU,EAAE,CAAC;IAChB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,CACpF,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,SAAS;YACf,CAAC,CAAC,WAAW,OAAO,CAAC,SAAS,gHAAgH;YAC9I,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,yDAAyD,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CACxB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAC7F,CAAC;IACF,MAAM,UAAU,GAAW;QACzB,GAAG,MAAM;QACT,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;QAChD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO;KAC3C,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACrF,CAAC;AAaD,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,OAAO,mBAAmB,CAAC;QACzB,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC;AAGD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/api/remediate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAuBnF,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAuF5B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAY5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAyBnF,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CA4F5B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CA4B5B"}

package/dist/api/remediate/index.js

@@ -1,10 +1,12 @@
 import { getModelSpec } from "../../platform/config.js";
 import { readIdempotentReport, storeIdempotentReport } from "../../platform/idempotency.js";
 import { runLocalRemediationPipeline } from "../../remediation/local/index.js";
+import { assertAutonomyAllows, summarizeAutonomy } from "../autonomy/index.js";
 import { assertChangeRequestAllowed, createChangeRequestsForReports, } from "../change-request/index.js";
 import { resolveConstraints, resolveCorrelationContext, resolveProvenanceContext, } from "../context.js";
 import { addRemediateDispositionStep, addRemediateErrorStep, addRemediateResultSteps, addRemediateResumeStep, addRemediateStartStep, createRemediateEvidence, writeRemediateEvidence, } from "../remediate.evidence.js";
 import { applySimulationMetadata, assertValidSimulationMode } from "../reporting.js";
+import { persistPlan } from "../runs/index.js";
 import { assertValidCveId } from "./validators.js";
 export async function remediate(cveId, options = {}) {
     assertChangeRequestAllowed(options);
@@ -12,6 +14,9 @@ export async function remediate(cveId, options = {}) {
     assertValidSimulationMode(options);
     const normalizedCveId = cveId.toUpperCase();
     const cwd = options.cwd ?? process.cwd();
+    // Earned autonomy (opt-in via the policy): below L2 nothing may be changed.
+    if (!options.dryRun && !options.preview)
+        assertAutonomyAllows(cwd, options.policy, "apply", "remediate");
     const constraints = resolveConstraints(options, cwd);
     const provenance = resolveProvenanceContext(options);
     const correlation = resolveCorrelationContext(options);
@@ -72,6 +77,9 @@ export async function remediate(cveId, options = {}) {
         constraints,
         resumedFromCache: false,
     };
+    const autonomySummary = summarizeAutonomy(cwd, options.policy);
+    if (autonomySummary)
+        finalReport.autonomy = autonomySummary;
     if (options.changeRequest?.enabled) {
         finalReport.changeRequests = await createChangeRequestsForReports({
             cwd,
@@ -88,10 +96,26 @@ export async function planRemediation(cveId, options = {}) {
     if (Object.hasOwn(options, "dryRun") || Object.hasOwn(options, "preview")) {
         throw new Error("planRemediation always runs with dryRun=true and preview=true. Remove dryRun/preview from options.");
     }
-    return remediate(cveId, {
+    const report = await remediate(cveId, {
         ...options,
         preview: true,
         dryRun: true,
     });
+    // The preview becomes a plan that `applyPlan` can carry out later. `evidence: false` asks for no
+    // files to be written, so no run is recorded then.
+    const cwd = options.cwd ?? process.cwd();
+    const autonomy = summarizeAutonomy(cwd, options.policy);
+    const withAutonomy = autonomy ? { ...report, autonomy } : report;
+    if (options.evidence === false)
+        return withAutonomy;
+    // At L0 (observe) the findings are reported but no applicable plan is recorded.
+    if (autonomy?.level === "L0") {
+        return {
+            ...withAutonomy,
+            summary: `${report.summary} Autonomy is L0 (observe): no plan was recorded, so there is nothing to apply.`,
+        };
+    }
+    const { runId, planId } = await persistPlan(report, options, cwd);
+    return { ...withAutonomy, runId, planId };
 }
 //# sourceMappingURL=index.js.map

package/dist/api/remediate/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,OAAO,GAAqB,EAAE;IAE9B,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,GAAG;QACH,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,KAAK;QACL,WAAW;QACX,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,mCAAmC;gBAC7D,YAAY;gBACZ,WAAW;gBACX,UAAU;gBACV,WAAW;gBACX,gBAAgB,EAAE,IAAI;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC;QACpB,QAAQ;QACR,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,KAAK;QACL,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,2BAA2B,CAAC,eAAe,EAAE;YAC1D,GAAG,OAAO;YACV,GAAG,WAAW;YACd,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACxD,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElD,uBAAuB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,2BAA2B,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAsB;QACrC,GAAG,MAAM;QACT,YAAY;QACZ,WAAW;QACX,UAAU;QACV,WAAW;QACX,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QACnC,WAAW,CAAC,cAAc,GAAG,MAAM,8BAA8B,CAAC;YAChE,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,aAAa;YAC9B,OAAO,EAAE,CAAC,WAAW,CAAC;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,OAAO,GAAqB,EAAE;IAE9B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC,KAAK,EAAE;QACtB,GAAG,OAAO;QACV,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api/remediate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,OAAO,GAAqB,EAAE;IAE9B,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,4EAA4E;IAC5E,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO;QACrC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,GAAG;QACH,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,KAAK;QACL,WAAW;QACX,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,mCAAmC;gBAC7D,YAAY;gBACZ,WAAW;gBACX,UAAU;gBACV,WAAW;gBACX,gBAAgB,EAAE,IAAI;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC;QACpB,QAAQ;QACR,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,KAAK;QACL,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,2BAA2B,CAAC,eAAe,EAAE;YAC1D,GAAG,OAAO;YACV,GAAG,WAAW;YACd,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACxD,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElD,uBAAuB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,2BAA2B,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAsB;QACrC,GAAG,MAAM;QACT,YAAY;QACZ,WAAW;QACX,UAAU;QACV,WAAW;QACX,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,eAAe;QAAE,WAAW,CAAC,QAAQ,GAAG,eAAe,CAAC;IAE5D,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QACnC,WAAW,CAAC,cAAc,GAAG,MAAM,8BAA8B,CAAC;YAChE,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,aAAa;YAC9B,OAAO,EAAE,CAAC,WAAW,CAAC;SACvB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,OAAO,GAAqB,EAAE;IAE9B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE;QACpC,GAAG,OAAO;QACV,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,iGAAiG;IACjG,mDAAmD;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IACpD,gFAAgF;IAChF,IAAI,QAAQ,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,GAAG,YAAY;YACf,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,gFAAgF;SAC3G,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAClE,OAAO,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC"}

package/dist/api/remediate.evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CA8DN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CAqBN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}
+{"version":3,"file":"remediate.evidence.d.ts","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EAEjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,UAAU,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACxF,GAAG,WAAW,GAAG,SAAS,CAa1B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAoBP;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CAiEN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,iBAAiB,GACxB,IAAI,CAqBN;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,IAAI,CAQN;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}

package/dist/api/remediate.evidence.js

@@ -44,6 +44,7 @@ export function addRemediateResultSteps(evidence, cveId, report) {
             reachability: result.reachability?.status,
             hasAlternatives: Boolean(result.alternativeSuggestions?.length),
             suppressedBy: result.suppressedBy?.justification,
+            maintainerVex: result.maintainerVex?.map((claim) => `${claim.maintainer.name}@${claim.maintainer.version}`),
             simulationWouldMutate: result.simulation?.wouldMutate,
             simulationRebuttalCount: result.simulation?.rebuttalFindings.length,
         });

package/dist/api/remediate.evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"remediate.evidence.js","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAEhB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,UAAU,uBAAuB,CAAC,MAOvC;IACC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACnD,GAAG,MAAM,CAAC,WAAW;QACrB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK;QAC9B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAMrC;IACC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,eAAe,CACb,MAAM,CAAC,QAAQ,EACf,iBAAiB,EACjB;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACxC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QACtD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,EACD;QACE,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC;QAC1E,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACjE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAiC,EACjC,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,eAAe,CACb,QAAQ,EACR,0BAA0B,EAC1B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD;YACE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM;YACzC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/D,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa;YAChD,qBAAqB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW;YACrD,uBAAuB,EAAE,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM;SACpE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAC5C,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,CAC7F,CAAC,MAAM,CAAC;IAET,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,eAAe,CACb,QAAQ,EACR,qBAAqB,EACrB,EAAE,KAAK,EAAE,EACT;YACE,gBAAgB;YAChB,uBAAuB,EAAE,gBAAgB;YACzC,kBAAkB,EAAE,mBAAmB;SACxC,CACF,CAAC;IACJ,CAAC;IAED,eAAe,CACb,QAAQ,EACR,kBAAkB,EAClB,EAAE,KAAK,EAAE,EACT;QACE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;QAClC,eAAe,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;QAC9D,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAC/C,gBAAgB;QAChB,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CACF,CAAC;IACF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAiC,EACjC,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,oGAAoG;IACpG,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+D,CAAC;IAC5F,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,SAAS;QAClC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,eAAe,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,KAAa,EACb,KAAc;IAEd,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,eAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiC,EAAE,KAAa;IACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IACD,eAAe,CAAC,QAAQ,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,QAAiC;IAEjC,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}
+{"version":3,"file":"remediate.evidence.js","sourceRoot":"","sources":["../../src/api/remediate.evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAEhB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,UAAU,uBAAuB,CAAC,MAOvC;IACC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACnD,GAAG,MAAM,CAAC,WAAW;QACrB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK;QAC9B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc;QAC7C,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAMrC;IACC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,eAAe,CACb,MAAM,CAAC,QAAQ,EACf,iBAAiB,EACjB;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACxC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QACtD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,EACD;QACE,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC;QAC1E,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;KACjE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAiC,EACjC,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,eAAe,CACb,QAAQ,EACR,0BAA0B,EAC1B;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD;YACE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM;YACzC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC;YAC/D,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa;YAChD,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,GAAG,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAClE;YACD,qBAAqB,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW;YACrD,uBAAuB,EAAE,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM;SACpE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAC5C,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,CAC7F,CAAC,MAAM,CAAC;IAET,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,eAAe,CACb,QAAQ,EACR,qBAAqB,EACrB,EAAE,KAAK,EAAE,EACT;YACE,gBAAgB;YAChB,uBAAuB,EAAE,gBAAgB;YACzC,kBAAkB,EAAE,mBAAmB;SACxC,CACF,CAAC;IACJ,CAAC;IAED,eAAe,CACb,QAAQ,EACR,kBAAkB,EAClB,EAAE,KAAK,EAAE,EACT;QACE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;QAClC,eAAe,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;QAC9D,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;QAC/C,gBAAgB;QAChB,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;QACxC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CACF,CAAC;IACF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAiC,EACjC,KAAa,EACb,MAAyB;IAEzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,oGAAoG;IACpG,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+D,CAAC;IAC5F,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,SAAS;QAClC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,eAAe,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAiC,EACjC,KAAa,EACb,KAAc;IAEd,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,eAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiC,EAAE,KAAa;IACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IACD,eAAe,CAAC,QAAQ,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,QAAiC;IAEjC,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}